SOC L1 Analyst

Arwentech; Lahore; On-site; PKR 900,000 - 1,500,000; Full time

Job summary

Arwentech is seeking a SOC L1 Analyst to monitor security events and perform initial analysis and triage of potential threats. You will work with the SOC team to maintain the security and integrity of systems and data.

Responsibilities include monitoring alerts from SIEM, IDS/IPS, and firewalls; escalating incidents as needed; documenting actions in the incident management system; and communicating findings to management. A Bachelor’s degree and willingness to work a 24/7 schedule are expected.

Qualifications

• Bachelor’s degree in CS, Information Security or related field, or equivalent.
• SOC or security-focused experience is a plus but not required for entry-level.
• Knowledge of SIEM, IDS/IPS, firewalls, and security tools.
• Ability to document incidents in the incident management system.
• Industry related certifications are a plus.

Responsibilities

• Monitor security alerts from SIEM, IDS/IPS, firewalls, and other tools.
• Perform initial analysis and triage to assess severity.
• Escalate incidents to L2/L3 when needed.
• Document incidents and actions in the incident management system.
• Analyze logs to identify potential threats.
• Use threat intelligence to stay informed about threats.
• Generate reports on incidents, trends and SOC performance.
• Document all events accurately and thoroughly.
• Communicate ongoing incidents to team and management.

Skills

Security alert monitoring

Initial analysis & triage

Team/Management communication

Fast-paced work

Task prioritization

Complex situation analysis

Explain tech to non-tech

Education

Bachelor's degree in CS/InfoSec

Tools

SIEM

IDS/IPS

Firewalls

Job description

The SOC L1 Analyst will be responsible for monitoring security events and incidents. This role involves the initial analysis and investigation of potential security threats and working closely with the SOC team to ensure the security and integrity of systems and data.

Security Monitoring:

• Continuously monitor security alerts from various sources such as SIEM (systems, IDS/IPS, firewalls, and other security tools.
• Perform initial analysis and triage of security events to determine their severity and urgency.
• Escalate confirmed security incidents to higher-level analysts (L2/L3) for further investigation and resolution.
• Document incidents and actions taken in the incident management system.
• Analyze logs from various security devices and systems to identify potential security threats.
• Utilize threat intelligence sources to stay informed about emerging threats and vulnerabilities.
• Generate regular reports on security incidents, trends, and overall SOC performance.
• Ensure accurate and thorough documentation of all security events and incidents.
• Communicate effectively with team members and management regarding ongoing incidents and security issues.

Requirements

Knowledge, Skills, Abilities (KSA’s) required to successfully perform the job:

Knowledge:

• Security principles, threat landscape, and common attack vectors
• Security tools and technologies (SIEM, IDS/IPS, firewalls, etc.)
• Network protocols and operating systems
• Incident management systems
• Security incident reporting and documentation

Skills:

• Security alert monitoring
• Initial analysis and triage of security events
• Communication with team members and management

Abilities:

• Ability to work in a fast-paced environment
• Ability to prioritize and manage multiple tasks
• Ability to analyze complex situations
• Ability to communicate technical information to non-technical audiences

Education, Experience, Licensure, Certification required for the position:

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent work experience.
• Prior experience in a SOC or similar security-focused role is a plus but not required for entry-level candidates

Certifications:

Industry related certifications will be a plus

Shift Work:

Ability to work in a 24/7/365 environment, including nights, weekends, and holidays.

Location:

On-site as determined by the company policy.

Competencies required to successfully perform the job: